1. General remarks

The website www.bufferzonefilm.ch is operated by OFFROAD REPORTS GmbH. The use of the website www.bufferzonefilm.ch is basically possible without providing any personal data. If an individual requires specific services from our website, the processing of personal data could be necessary. In case of missing legal basis for such processing, we shall ask for a general consent of the person concerned.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, shall be in accordance with the data protection regulations that apply for OFFROAD REPORTS GmbH in the specific country. By means of this privacy policy, our company wishes to inform the public about the nature, extent and the purpose of the personal data being collected, used and processed by us. Furthermore, we are providing information about rights under this privacy policy .
OFFROAD REPORTS GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed via this website. Nevertheless, data transmissions based on internet technology can be affected by security issues, so that an absolute protection is not ensured. For this reason, every person concerned is free to transfer personal data in alternative ways, such as by telephone etc.

2. Name and address of the data controller and data protection officer:

3. Cookies

The website www.bufferzonefilm.ch does not use any cookies.

4. Collection of general data and information

The server hosting the website www.bufferzonefilm.ch is collecting a set of general data and information, every time the website is used by an individual or an automated System. This general data and information is stored in the log files saved by the server e.g.
the (1) browser types and versions used, (2) the operating system used (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-web pages which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) the Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information, which are relevant for security and protection in case of attacks on our information technology systems.
When using this general data and information, OFFROAD REPORTS GmbH does not identify the person using our services. This information is rather required to (1) deliver the content of our website correctly, to (2) optimize the content of our website and the advertising related, to (3) ensure the continuous functioning of our IT systems, to(4) provide the information required by law enforcement authorities in case of a cyberattack. The anonymous data of the server log files are strictly separated from all stored personal data provided by an individual.

5. Rights of the person concerned

a) Right to confirmation
Each individual has the right granted by the European directive and regulatory authority, to demand a confirmation as to whether there are any personal data processed related to that person. For such confirmation you can contact our data protection officer.

b) Right to information
Everyone involved in the processing of his personal data has any time the right to get information free of charge about the personal data stored and a copy of this information. Furthermore, the European Regulatory Authority is granting to all person concerned information about:
•the purpose of processing the personal data
•the categories of personal data being processed
•the recipients or categories of recipients to whom the personal data have been disclosed or still are being disclosed, in particular to beneficiaries in other countries or international organizations
•if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for the determination of this duration
•the existence of a right to rectification or erasure of personal data or of the limitation of the personal data processing by the controller or a right to object to this processing
•the existence of a right of appeal to a supervisory authority
•if the personal data have not been collected from the data subject: All available information on the origin of the data
•the existence of automated decision-making, including profiling, and - at least - by providing meaningful information about the logic involved as well as the implications and intended effects of a such processing for the data subject
Furthermore, the individual has a legal right to be informed, whether or not personal data were transmitted to a third country or to an international organization. If this is the case, then the person concerned is entitled to get information about the guarantees established in the transmission process.
Everybody calling on this right to information is entitled to contact our data protection officer.

c) Right to rectification
Any person affected by the processing of personal data is entitled to demand the immediate correction of incorrect personal data linked to them. Furthermore, the person concerned is entitled to request the completion of incomplete personal data by means of a supplementary statement. If an affected person wishes to exercise this right of rectification, they can contact our data protection officer.

d) Right to cancellation (right to be forgotten)
Any person affected by the processing of personal data shall have the right to require the immediate deletion of the personal data concerning him or her, if one the following cases applies and as far as it is not required for the processing:
• The personal data are no longer necessary for the purposes they were intended to.
• The person affected is withdrawing her consent on which the processing was based and any otherwise legal basis for the processing is missing.
• The person affected objects to the processing and there is no legitimate reason for the processing or the individual objects to the processing.
• The personal data were processed unlawfully.
• The deletion of the personal data is due to the fulfillment of a legal obligation under the European Union law or the law of the Member States to which the person responsible is subject.
If one of the above reasons is correct and an affected person wishes to ask for the deletion of personal data stored by OFFROAD REPORTS GmbH , it may at any time contact our data protection officer.
If personal data has been made public by OFFROAD REPORTS GmbH, and our company is required to delete those personal data,
OFFROAD REPORTS GmbH is taking into account the available technology and the implementation costs at a reasonable level to put other responsible data controllers that process the published personal data on notice that the person concerned is requesting the erasure of all of this personal data or of copies or replications of this personal data, as far as they are not indispensable for the processing.

e ) Right to restriction of processing
Any person affected by the processing of personal data shall have the right to require from the controller to restrict the processing if any of the following conditions apply:
• The accuracy of the personal data is contested by the data subject for a period of time sufficient to allow the responsible persons to verify the accuracy of personal data .
• The processing is unlawful and the data subject refuses to delete the personal data and instead requests the personal data restriction on the use of personal data.
• The person responsible no longer needs the personal data for processing purposes, the person concerned instead needs them however, to assert, exercise or defend legal claims .
• The data subject has objected to the processing and it is not yet clear whether the legitimate reasons of the person responsible over those of the data subject predominate .
If any of the above conditions are met and individuals request the restriction of personal data stored by OFFROAD REPORTS GmbH, they can contact our data protection officer.

f ) Data transferability
Any person affected by the processing of personal data shall have the right to have their personal data delivered in one structured, common and machine-readable format. They also has the right to transfer this data to another person in charge without being hindered by those responsible, which originally received the personal data, provided that the processing based on the legally required consent.
Furthermore, the data subject is allowed to exercise their right to transfer personal data directly from one person responsible to another person responsible, to the extent that it is technically feasible and insofar as this does not affect the rights and freedoms of other persons.

g ) Right to object
Any person affected by the processing of personal data shall be entitled, at any time for reasons arising out of their particular situation, to object against the processing of personal data relating to them. This also applies to an intended profiling. Offroad Reports GmbH waived irrevocably out the use of personal data for profiling, direct mail, address trading etc.

h ) Right to revoke a data protection consent
Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
If the data subject wishes to assert their right of withdrawal, they can contact our data protection officer.

6. Privacy Policy for Use and Use of YouTube

The data controller has integrated components of YouTube on this website. YouTube is an in-depth video portal that allows video publishers to freely post video clips and other users for free viewing, review and commenting this. YouTube allows the publication of all kinds of videos, which is why both full movie and television broadcasts, but also Music videos, trailers or user-made videos are available on the internet portal.
YouTube's operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube, LL C is a subsidiary of Google LCC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
By each call to one of the individual pages of this website that is operated by the controller and on which a YouTube component (YouTube video) is integrated, the Internet browser on the user's IT-system is automatically initiated by the respective YouTube component. More information about YouTube can be found at https://www.youtube.com/yt/about/en/. In the context of this technical process YouTube and Google receive knowledge about which sub-page of our website is visited by the person concerned.
If the person is logged in to YouTube at the same time, YouTube recognizes by calling a sub-page containing a YouTube video, which specific sub-page of our website is visited by the person concerned. This information is collected through YouTube and Google and assigned to the respective YouTube account of the person concerned.
Through the YouTube component YouTube and Google are getting always information that the person visited our website, if the person is logged in at the time of the call simultaneously on YouTube; this happens independently of whether the person clicks on a YouTube video or not. Is such a transfer of this information to YouTube and Google not wanted by the data subject, they can prevent the transmission by logging out of our website from their YouTube account.
YouTube and Google privacy policy can be found at https://www.google.de/intl/de/policies/privacy

7. Payment: Privacy Policy PayPal as payment

The data controller has integrated on this website components of PayPal. PayPal is an online payment service provider. Payments are made through so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal has the ability to process virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via e-mail address; there is no traditional bank account number installed. PayPal makes it possible to redeem online payments to third parties or to receive payments . PayPal also takes on trustee functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.A.R.L & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If an individual is choosing during the ordering process from our online shop as a payment option "PayPal", data of the individual is sent to PayPal automatically. By selecting this payment option, the individual agrees transmission of personal data required for the payment processing.
The personal data transmitted to PayPal is usually a first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. For the completion of the purchase contract also personal data related to the respective order are necessary.
The purpose of the transmission of the data is payment processing and fraud prevention. The data controller shall transmit personal data if a legitimate interest is given for the transmission. The personal data exchanged between the data controller and PayPal may be transmitted by PayPal to credit agencies, in order to check both, identity and credit rating.
PayPal is handing over personal data if necessary to affiliated companies and service providers or subcontractors, as long this is necessary to fulfill the contractual obligations or if the data is being processed by commission.
The data subject has the option to revoke the consent to the handling of personal data by PayPal at any time . A revocation has no effect on personal data that is compulsorily processed, used or must be submitted for (contractual) payment processing.
PayPal's applicable privacy policy is available at https://www.paypal.com/webapps/mpp/ua/privacy-full.

8. Duration personal data storage

The criterion for the duration of the storage of personal data is the respective legal retention period. After the deadline , the corresponding data will be routinely deleted, if they are no longer required to fulfill the contract or to initiate a contract.

9. Legal or contractual regulations for the provision of personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of failure to provide personal data

We clarify hereby that the provision of personal data is required by law in some cases (e.g. Tax laws) or also from contractual arrangements (e.g. information on the contractor). Sometimes it may be necessary to close a contract, that a person involved has to provide personal data that will be processed by us. The person involved is e.g. obliged to provide us with personal information when our company enters into a contract with them. A failure to provide the personal data would mean that the contract with the person involved could not be closed. Before transmitting personal data by the person involved , they can contact our data protection officer.
Our data protection officer shall inform the person involved on a case-by-case basis as to whether the provision of the personal data is required by law or by contract or whether it is necessary for the conclusion of the contract, including further information about the consequences of non-provision of personal data.